
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E1E3518C069F5FB9A7DF32C2D6B913BEFA701A7B.cer
File: E1E3518C069F5FB9A7DF32C2D6B913BEFA701A7B.cer (raw, json)
Hash identifier: AAJDmq7GpFONSQucENXFet/k+T3kvGktIGxHlvB272A=
Subject key identifier: E1:E3:51:8C:06:9F:5F:B9:A7:DF:32:C2:D6:B9:13:BE:FA:70:1A:7B
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 3047E45BAFEA5F6BED09CDE67B7605F8CD16766C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Manifest: rsync://rpki-rsync.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/E1E3518C069F5FB9A7DF32C2D6B913BEFA701A7B.mft
caRepository: rsync://rpki-rsync.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/
Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml
Certificate not before: Sun 03 May 2026 01:12:34 +0000
Certificate not after: Sun 02 May 2027 01:17:34 +0000
Subordinate resources: IP: 103.63.26.0/24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:47:e4:5b:af:ea:5f:6b:ed:09:cd:e6:7b:76:05:f8:cd:16:76:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 01:12:34 2026 GMT
Not After : May 2 01:17:34 2027 GMT
Subject: CN=E1E3518C069F5FB9A7DF32C2D6B913BEFA701A7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:1b:d1:e2:c3:36:dc:68:d3:b3:7d:8f:22:
d3:06:21:a4:92:8b:dd:73:b7:d4:3c:b4:6c:27:09:
f8:40:d3:e2:4b:59:3a:d7:0e:7a:27:c6:b5:3e:05:
bf:6b:5a:45:89:3f:9a:a6:e1:96:f9:96:e4:b3:3c:
6c:68:a9:9d:6b:28:78:85:e0:a5:b2:eb:4e:5a:7a:
c7:c6:a1:f1:96:0b:5b:12:1f:12:7d:fa:60:f9:07:
b9:5e:83:4f:91:e2:fb:4b:c5:32:e7:9e:e6:c0:b9:
26:58:0c:25:a2:c6:b6:9c:a8:7b:56:a9:0f:8e:13:
24:57:2e:3f:09:99:d6:2f:4c:46:5f:5c:62:3f:f3:
1d:55:1b:65:f1:b9:b4:a5:48:6d:d7:05:3b:c1:96:
2a:d6:95:a6:4a:2f:a4:d4:e9:0f:bd:60:6c:33:a6:
69:2a:7e:32:58:bf:85:71:4a:6f:2f:79:0b:d8:d0:
0b:ac:0b:9a:c5:f7:ab:97:78:12:cd:c2:33:ac:9a:
2b:0b:b6:d6:40:70:bb:a6:e4:ea:48:af:2f:6b:e0:
5e:59:13:8a:db:d4:db:a1:67:ed:14:04:a5:88:0e:
d3:84:0b:84:19:5a:3e:89:3f:79:77:2f:98:8d:dd:
be:9d:d6:69:17:58:7f:af:74:37:8b:55:0e:43:83:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E1:E3:51:8C:06:9F:5F:B9:A7:DF:32:C2:D6:B9:13:BE:FA:70:1A:7B
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/
RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/E1E3518C069F5FB9A7DF32C2D6B913BEFA701A7B.mft
RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.63.26.0/24
Signature Algorithm: sha256WithRSAEncryption
13:d1:ae:9c:db:10:dd:68:82:ef:fc:cb:a9:62:25:6a:bc:13:
e7:ff:05:64:aa:d3:5d:58:3a:66:0e:ff:e4:3f:21:c5:4c:d2:
2d:56:3c:37:21:16:67:0a:9d:9a:47:f2:65:f6:4b:ac:fd:92:
d8:66:69:6b:69:8e:13:d9:f7:8e:54:bf:01:0a:23:44:37:0d:
0d:af:c9:be:ee:09:63:a8:67:c8:06:87:de:a6:19:04:45:5a:
ee:c7:aa:d2:45:5c:82:20:51:88:bb:fb:df:be:53:f7:dd:65:
d2:3b:10:7a:c3:4f:d0:25:92:60:3a:a0:01:21:0c:43:98:86:
01:ce:c3:90:d6:c9:82:f6:ed:1b:4a:fd:9c:a8:e4:af:58:91:
d7:b6:ed:b9:dd:3c:bc:8b:5e:e0:98:31:e6:b1:ea:a8:37:3d:
52:f7:44:0b:a7:34:58:10:b8:f4:60:5b:6a:26:af:bb:92:c1:
cf:f3:a5:e3:bc:54:a6:36:58:be:1a:61:b7:b7:e7:c0:ac:bf:
6b:2d:b7:dd:f8:8a:1f:3b:0e:2a:dc:c3:fe:83:f6:54:e3:16:
c8:53:ce:54:7b:28:9b:01:23:01:0d:ac:fd:96:91:2c:f2:1b:
b3:cf:15:b5:85:8a:b8:9f:cd:bd:7a:cf:d8:54:14:b3:e2:83:
21:e5:14:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:49 2026 by rpki-client